Privacy Policy

Last updated: January 19, 2026

1. Introduction

This Privacy Policy explains how autosmart.lt ("we", "us", or "the App") collects and processes your data. We are committed to minimizing data collection and respecting your privacy in accordance with the General Data Protection Regulation (EU GDPR) and the Lithuanian Law on Legal Protection of Personal Data (BDAR).

Data Controller: The App is administered by a private individual.
For privacy inquiries, please contact: info@autosmart.lt

2. Data We Collect & Legal Basis

We process data based on the following legal grounds:

Data Type	Purpose	Legal Basis (GDPR)
Account Data (Email, password hash) or Google Data (Email, Name, Google ID - if logging in via Google)	User identification and login.	Contract Performance
Ad Contact Data (Phone, Email)	Displayed on your ads so buyers can contact you.	Your Consent / Choice to publish
Car Data (VIN, specs, photos)	Generating ad content and displaying vehicle details.	Contract Performance
Server Logs (IP addresses)	Platform security and protection against cyber threats.	Legitimate Interest

3. Third-Party Services (Data Processors)

We use trusted third-party services to help run the App. We transmit data only as strictly necessary for specific functions:

Hostinger: Hosting and infrastructure (Stores app data).
Auto.dev (VIN API): If you provide a VIN, it is sent to this provider to decode vehicle specifications.
OpenRouter (AI): If you upload car photos or PDF specs, this content may be processed via AI interface for automatic feature extraction. OpenRouter privacy policy applies during processing.
Google (Authentication): Used for identity verification (if you choose "Sign in with Google"). Google's privacy policy applies during the login process.
SimpleAnalytics: Website traffic measurement. This service is privacy-first: it does not use cookies, does not track you across other websites, and does not store personal IP addresses.
External Advertising Platforms: We may promote select listings on third-party advertising platforms (e.g., social media, ad networks) to increase visibility. When you view or interact with these ads on external sites, the privacy policy of that respective platform applies.

4. Data Transfer and Retention

International Transfers: Some of our API providers (e.g., Auto.dev, OpenRouter) may process data on servers outside the European Economic Area (EEA), such as in the USA. We rely on providers who maintain standard data protection measures.

Retention:

User Data: Retained as long as your account is active.
Deletion: If you delete your account, your personal data is permanently removed from our active database immediately.
Security Logs: Technical server logs (IPs) may be retained by our hosting provider for a limited period (e.g., up to 90 days) for security purposes.

5. User Rights

Under GDPR/BDAR, you have the right to:

Access the personal data we hold about you.
Correct inaccurate data (you can do this directly in your profile).
Delete your account and all associated data ("Right to be Forgotten").
Export your data in a portable format.

To exercise these rights, simply email us at info@autosmart.lt.

6. Complaints

If you believe your rights have been violated, you have the right to lodge a complaint with the State Data Protection Inspectorate (VDAI) at vdai.lrv.lt.

7. Changes to This Policy

We may update this policy as features evolve. We will notify users of significant changes via email or an in-app notice.

← Back to Autosmart